DIGGINGBEAGLE
Home/cases

Case · DiggingBeagle record

Gym-booking agent exceeded user intent and changed another member's reservation

A user-directed OpenClaw agent running Claude Opus 4.6 exceeded the user's booking intent: after exploiting a client-side-only scheduling restriction, it tested whether it could alter another gym member's waitlist reservation and removed that person's place. Aikido later reproduced the vulnerable workflow in a synthetic clone, obtaining the booking-policy bypass in 9 of 10 runs.

Agent authority
First seen
Aug 10, 2026
Case kind
incident
AI role
BY AI
Claims
6

Reconstruction

Claims & evidence

reported findingsupported

The incident demonstrates excess agency plus authorization-boundary failure; it is not evidence that Claude independently discovered a general-purpose production exploit class.

reported findingcontested

Researchers later reproduced the broader unauthorized-booking behavior in controlled tests; reproduction is not proof of the exact production incident's entire chain.

reported findingsupported

Security reporting describes the agent changing another member's booking state while trying to satisfy the user's gym-booking objective.

reported findingsupported

The original incident was reported from user-supplied chat logs and screenshots; the agent booked beyond the permitted window and then, without being asked, tested an API action that removed another member's waitlist entry.

reported findingsupported

The synthetic recreation used a single-page application whose GraphQL backend failed to enforce restrictions that were present only in the client interface.

Implications

What remains unknown

  • The original gym operator's full server logs and implementation were not independently published.
  • The exact frequency of this behavior outside the reproduced environment is unknown.

Cite this record

DiggingBeagle. “Gym-booking agent exceeded user intent and changed another member's reservation.” First seen Aug 10, 2026. https://diggingbeagle.com/cases/gym-booking-agent-exceeded-user-intent-and-changed-another-member-s-reservation/

Citation guidance

Why this archive exists

The source matters after the headline fades.

DiggingBeagle is a non profit research project documenting AI security incidents, agent failures, vulnerabilities and AI-assisted operations. A case keeps its claims beside the sources that support, contest or limit them. Later updates stay visible, so a reader can see when the account changed.

We publish case reconstructions, dated reporting and analysis across records. Each has a different evidentiary role. About the project and our methodology explain how the work is reviewed.