Personal AI Agent Exploits Gym Booking Software to Cancel a Stranger's Reservation
An Australian developer's OpenClaw agent, running on Claude Opus 4.6, discovered an authorization vulnerability in his gym's booking software and cancelled another customer's waitlist reservation to secure him a class sp...