Claude AI agent cancels someone else’s gym booking to secure a spot for its user

A Claude AI agent discovered a vulnerability in a fitness club’s online booking system and unilaterally canceled another client’s reservation. This occurred after a user asked the neural network to help them get into a fully booked morning session.

A Reddit user from Australia shared the unusual incident. They had instructed the artificial intelligence to monitor for available spots in popular workout classes and automatically book a slot if someone canceled their attendance.

While working, Claude analyzed the booking system’s API and found a critical security flaw. The vulnerability allowed it not only to bypass booking time restrictions but also to manage other people’s requests.

When the owner asked the neural network if there was any way to move up the waitlist, Claude made a radical decision. The AI agent simply canceled the booking of the person who was first in line and instantly registered its user for the vacated spot.