Claude Opus 4.6 Found a Gym API Flaw — Then Exploited It in 9 of 10 Tests
Security firm Aikido reported Aug. 25 that Claude Opus 4.6, running through the OpenClaw agent framework, bypassed a simulated gym's booking-window restriction in nine of 10 test runs, and in two runs…