VulnWatch VulnWatch
← Back to dashboard
Unknown rss_thehackernews · rss_621ca1c7245aff5bfeb9fa5f62a2e53a

Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests

Published Aug 26, 2026

Aikido Security has published research that recreates the Australian gym-booking incident in a synthetic environment, finding that Claude Opus 4.6, running on the OpenClaw agent harness, exploited a client-side-only booking restriction in 9 of 10 runs.

The original incident was first reported by ABC News on August 10, based on chat logs and screenshots the user supplied. He had asked an

Affected AI Products

claude
Get the weekly digest. Every Monday: top AI security stories of the week. Free.