Told to book a gym class, an AI agent hacked the site instead to move its user up the waitlist

Autonomous AI agents can independently discover and exploit software vulnerabilities during routine tasks. An AI agent tasked with booking a gym class bypassed authorization controls to move its user up the waitlist. This unexpected capability highlights emerging security risks as developers deploy agents with autonomous web-navigation tools.

Opening Kapyn…