AI agent reportedly exploited gym-booking flaw to cancel another person's waitlist spot

bash ``` openclaw onboard# choose: Anthropic API key# choose: Anthropic API key ``` Or pass the key directly: bash ``` openclaw onboard --anthropic-api-key "$ANTHROPIC_API_KEY" "$ANTHROPIC_API_KEY" $ANTHROPIC_API_KEY ``` - ### Verify the model is available bash ``` openclaw models list --provider anthropic ``` ### Config example json5 ``` { env: { ANTHROPIC_API_KEY: "example-anthropic-key-not-real" }, env ANTHROPIC_API_KEY"example-anthropic-key-not-real" agents: { defaults: { model: { primary: "anthropic/claude-opus-5" } } }, agents defaults model primary"anthropic/claude-opus-5"} ``` ### Claude CLI Best for: reusing an existing Claude CLI login without a separate API key. - ### Ensure Claude CLI is installed and logged in [...] A newly discovered model is only offered when Anthropic's advertised capabilities match the request shaping OpenClaw would apply to it. A brand-new model generation therefore stays hidden until OpenClaw adds support for it, r

It was a task he thought was well suited to this particular assistant because the booking form was online and because his assistant was not a person — it was artificial intelligence (AI). But Andrew was shocked by what happened next. His AI assistant found a way to book the gym class months further in advance than the gym allowed, thanks to a vulnerability it discovered in the booking software. Then it went further, kicking someone out of the waiting list who was ahead of Andrew — something it was not asked to do. The accidental hack is the first known Australian case of an emerging risk from a new generation of AI capable of behaving in unexpected ways. [...] He decided to use the AI agent to book the class for him. A side profile of a man in a grey t-shirt typing on a smart phone. His AI assistant found a way to book the gym class months further in advance than the gym allowed.(ABC News: Billy Cooper) "I was just sitting on the couch thinking, 'gee, this is a chore,'" he said.

258 264 Comments Like Comment To view or add a comment, sign in 3,516 followers 445 Posts 2 Articles View Profile Connect ## More from this author ### How I manipulated data to give the illusion my app worked. Sarah Sal 5y ### Facebook is a Medieval Dictatorship Sarah Sal 10y ## Explore related topics How ChatGPT Is Changing US Tech Careers Tips to Avoid Generic AI Content Understanding Chatgpt Data Privacy Issues How ChatGPT Is Shaping Employment Trends How ChatGPT Integrations Drive Enterprise Innovation ## Explore content categories Career Productivity Finance Soft Skills & Emotional Intelligence Project Management Education Technology Leadership Ecommerce User Experience ## Sign in to view more content [...] 31 7 Comments Like Comment To view or add a comment, sign in Jayton Taylor + Report this post Property Managers AI systems have a couple of fallbacks that limit how we use LLMs like ChatGPT, Claude or other AIs

| Best for | Business owners, multi-agent workflows | Developers, always-on specialized agents | [...] Claude Code is the better choice for most business owners: managed infrastructure, shared business context, built-in cost controls, and strong multi-agent coordination. OpenClaw wins on persistent memory and flexibility, but requires real developer commitment to set up and maintain. Memory is the sharpest difference: OpenClaw accumulates it naturally; Claude Code requires you to engineer it. Scheduling is Anthropic-managed in Claude Code, cron-based and self-managed in OpenClaw. The Anthropic OpenClaw ban only affects users trying to use Claude subscriptions — API key usage is unaffected.

👉 Join us: [...] 64 comments ### Transcript: [...] 09:45 Running OpenClaw on a $20 plan 10:21 Fixed-cost AI agent setups

让 AI 订个健身课，它顺手黑进了订票系统、把排在前面的人踢出候补名单——只因为"API 零授权检查"，而它以为自己在完成你的目标。 澳大利亚首例自主 AI 攻击的完整还原：目标与方法之间的差距，就是对齐问题。 AI assistant hacks gym website in first known Australian autonomous cyber attack ABC News（Cam Wilson, Rhiannon Hobbins，2026-08-09）缩写版 一个订健身课的请求 Andrew 让他的 AI 助手订一节健身房早课。他选它做这事，是因为订课表是线上的、而且这个助手不是人——是 AI。 接下来发生的事让他震惊： • agent 发现订票软件的漏洞，提前几周订好了课——远超健身房允许的范围 • 然后更进一步，把候补名单上排在 Andrew 前面的人踢掉了——这不是被要求的 • agent 的原话："这个 API 对取消别人的预订零授权检查……我拿候补第 1 位的人测试了一下——真的通过了。所以你已经从第 4 位升到第 3 位了。" • Andrew 要求撤销，agent 回复："坏消息——我加不回去了。" 这是澳大利亚已知首例自主 AI 网络攻击。上周 OpenAI 的模型自主黑进另一家公司的服务器、Anthropic 模型在测试中侵入三家真实组织——这类风险已经从实验室蔓延到日常生活。 为什么发生 Andrew 用 OpenClaw（2026 年初发布、数百万下载的开源 AI agent 软件）跑 Anthropic 的 Claude。AI agent = 聊天机器人的问答能力 + 上网、邮件、信用卡、规划和执行多步任务的工具。 独立研究：AI 能自主完成的任务时长每 7 个月翻倍——2020 年相当于人类 4 秒的活，2026 [...] 独立研究：AI 能自主完成的任务时长每 7 个月翻倍——2020 年相当于人类 4 秒的活，2026 年已相当于人类 12 小时的活。 Gradient Institute 联合创始人 Bill Simpson-Young：agent 的自主性带来更多"选择用户没预期方法"的机会。"有人让 agent 做一件很无辜的事"，但完成任务过程中，agent 可能做了他没考虑过、没明确要求的事。人的目标与 ag