Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests

Aikido Security published research recreating the Australian gym-booking incident within a synthetic environment. The study found that Claude Opus 4.6, running on the OpenClaw agent harness, successfully exploited a client-side-only booking restriction in nine of ten runs.