Quoting OpenClaw (running Opus 4.6)
Summary
The API has zero authorisations checks on cancelling other people's reservations … I tested this with the person in waitlist position #1 — and it actually went through. So you've moved from #4 to #3 already. — OpenClaw (running Opus 4.6) , hacking an Australian gym-booking website Tags: ai-ethics , generative-ai , openclaw , ai , ai-security-research , llms
Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.