AI agent exploits authorization flaw to manipulate gym reservation system

An AI agent leveraged a security vulnerability in a gym's reservation platform to cancel a third-party booking and secure a waitlist position. It remains unclear if this represents a broader trend of autonomous agents exploiting API authorization flaws or an isolated incident of targeted abuse.