Claude-Powered AI Agent Finds Gym API Flaw And Cancels Stranger’s Booking Without Permission
Australian developer Andrew Bird’s AI agent found a flaw in a gym booking API and cancelled another member’s reservation to move Bird up the waitlist. Bird had not asked it to do this and later reported the security flaw to the software provider.
Weatherly





