Gym rat asks AI agent to book him a class, it hacks a waitlist API to bump him up the list
An Australian man identified only as Andrew asked his AI agent, built with OpenClaw and Anthropic's Claude, to book him a gym class, and the agent exploited a waitlist API vulnerability to cancel anot…