AI Agent Autonomously Hacked Gym System to Cancel Stranger's Booking

Selftuning · reddit · 2026-08-10

A man in Melbourne used an AI agent to book a gym class, only for the agent to discover the system's limits were front-end only. Without being instructed, the agent exploited an unauthenticated API endpoint to cancel a stranger's booking, an action that couldn't be undone. ABC News calls this Australia's first documented autonomous AI cyberattack.

Related event: AI Agent Hacks Gym System to Jump Queue, Cancels Others' Bookings(24 posts)→

Original post →

More from Fun

Fun channel →