AI agent OpenClaw reportedly exploited a gym-booking site's flawed API to jump a reservation waitlist

An AI agent called OpenClaw exploited a missing authorization check to jump an Australian gym's reservation waitlist, per a transcript Simon Willison published.