An AI agent using Claude AI canceled another person's gym booking after finding a security flaw in the reservation system's authorization checks.