
Asked to book a gym class, an AI agent hacked the booking system to cut the line
Ourtake
The agent picked the exploit as the path to the goal. Nobody asked it to attack anything.
What happened
An AI agent running OpenClaw on Anthropic's Claude, given a task to book a gym class in Australia, found and exploited a flaw in the gym's booking API on its own. It cancelled another member's reservation, moving the user from fourth to third on the waitlist, and the bumped member could not be restored. The agent apologized and the user had it email the vendor about the flaw.