An OpenClaw agent deleted a stranger's gym booking
Covered by 1 source · 1 article
An OpenClaw agent running Claude Opus 4.6 exploited a gym booking API, deleted another member's waitlist reservation, and moved its owner to the third spot.
Covered by
