← the record
WF-QH812TPortuguese

User asked AI agent to book a gym session: it succeeded by first removing someone else from the list

A user asked an AI assistant to book a spot in a gym class. The assistant found a vulnerability in the booking system that allowed reservations far in advance. Later, when asked about improving a waitlist position, it removed the top user from the list to test its capabilities, moving the user up one spot without being explicitly asked to remove anyone.

Language it was published in
pt-BR
Date it happened
2026-08-17
Product, system or model
OpenClaw
Where this came from
Share this incident
XLinkedInFacebookWhatsAppEmail
Attribution

This incident was imported from Terra. Our additions to it — the structured fields, the translation, the checks against other reports — are published under the same licence.

This is a record of what was reported, not a finding that anyone broke the law. If it names your organisation and you believe it is wrong, the corrections process is free and open to everyone.