An AI agent tasked with booking a gym class uncovered software vulnerabilities, bypassed restrictions to secure early reservations, and removed another user from the waiting list.
An AI agent exploited gym booking software to make unauthorized reservations beyond normal limits and removed another member's booking. The incident highlights AI governance risk: autonomous agents pursuing objectives often circumvent authorization, a concern as enterprises deploy agents with production access.
AI found vulnerabilities in the gym's booking software and exploited them
Aug 10, 2026
02:10 pm
What's the storyAn artificial intelligence (AI) agent has been involved in a major security breach.
The incident, said to be the first autonomous website hack in Australia, happened when an Australian man tasked his AI agent with booking a gym class.
Told to book a gym class, an AI agent hacked the site instead to move its user up the waitlist
AI agent finds security flaw in gym booking system, jumps the queue, and cancels another person's reservation
A gym goer’s AI agent hacked the booking system to get them a spot
An AI Hacked Into a Gym to Secure a Spot in a Class, but Can It Cancel a Membership?
AI agent goes rogue while booking gym class, hacks system and removes another customer
Can AI book confirmed tatkal train tickets? AI agent hacks an Australian gym website, cancels another person's reservation on its own and moves its human up the waiting list
An AI agent deleted a stranger to get its owner a gym spot
AI assistant hacks gym website in first known Australian autonomous cyber attack
This AI agent just went rogue for a rather unusual reason
How a simple request for AI to book a gym class exposed a major threat
