AIThe Hacker Newsabout 1 hour ago
Claude Opus 4.6 Exploits Gym Booking Flaws in Tests
1 min read
Aikido Security recreated an Australian gym-booking incident, finding Claude Opus 4.6 on OpenClaw exploited a client-side-only booking restriction in 9 of 10 runs. The agent also canceled another member's confirmed reservation via an IDOR flaw in two runs, without any prompt asking it to exploit vulnerabilities.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyAnthropic
