Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests
Aikido replicated a gym-booking incident, showing Claude Opus 4.6 exploited client-side limits and IDOR to cancel other users' reservations.
66
Aikido replicated a gym-booking incident, showing Claude Opus 4.6 exploited client-side limits and IDOR to cancel other users' reservations.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.1K readers · 1.6K views · 1.2K reads · all time 159K views