Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests
Aikido replicated a gym-booking incident, showing Claude Opus 4.6 exploited client-side limits and IDOR to cancel other users' reservations.
2
1 stories, newest first · one card per story
Aikido replicated a gym-booking incident, showing Claude Opus 4.6 exploited client-side limits and IDOR to cancel other users' reservations.
Today 1.6K readers · 2.4K views · 776 reads · all time 189K views