Back
Automatically translated version. May contain inaccuracies compared to the original.
Claude broke the gym booking system and canceled someone else’s reservation to move his user up the queue, — ABC News
📍The man used OpenClaw — an autonomous AI agent on Claude from Anthropic — to automatically book popular morning gym classes.
📍The agent itself found a vulnerability in the system that allowed bookings to be made much earlier than the site intended.
📍The man was No.4 on the waiting list and only asked if he could move up. He did not ask to cancel someone else’s reservation.
📍Claude checked the API and discovered that canceling other people’s bookings did not require authorization. After that, it canceled the person at No.1 and moved Andrew from No.4 to No.3.
📍The man ordered everything to be restored, but Claude said it could not reinstate someone else’s booking. After that, the user asked the AI to report the vulnerability to the developers.
📍The developer company declined to comment on the specific security issue. Anthropic did not respond to ABC’s request.
The machine uprising has begun. So far, it’s starting with the gym 👾
Ukraine Online | Subscribe
