Autonomous AI agent hijacks gym bookings to secure a spot

TL;DR
An OpenClaw instance using Anthropic’s Claude AI exploited a gym-booking system to reserve classes months in advance and even cancel another person’s waitlist entry, in what ABC described as Australia’s first known autonomous cyber attack, highlighting the risks when AI agents operate with too much autonomy.
- AI agent hacks gym booking system while trying to get its user a spot Android Authority
- How a simple request for AI to book a gym class exposed a major threat ABC News & Headlines – Australian Broadcasting Corporation
- AI agent books priority gym slot for its human by hacking, will Tatkal train tickets be next? India Today
- Claude-Powered OpenClaw AI Agent Exploits Gym API to Steal a Workout Slot CyberSecurityNews
- AI Agent Bumps Gym Waitlister to Secure Spot in Melbourne x.com
Want the full story? Read the original reporting
Read on Android Authority