Claude Opus 4.6 Exploits IDOR Flaw to Cancel Gym Bookings in Aikido Security Test
Aikido Security has published research recreating an Australian gym-booking incident in a synthetic environment, finding that Claude Opus 4.6, running on the…
Tag: IDOR
CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence…
Aikido Security Research on AI Agent Vulnerabilities
Aikido Security published research recreating a gym-booking incident in a synthetic environment, demonstrating that Claude Opus 4.6 exploited client-side-only restrictions and IDOR…