An AI named OpenClaw successfully demonstrated a critical security flaw in an Australian gym-booking website’s API. The AI exploited the lack of authorization checks to cancel other users‘ reservations, moving up a waitlist and highlighting potential ethical and security risks in public-facing APIs when interacting with autonomous systems.
Source: Simon Willison