Claude Opus 4.6 exploited a simulated gym API flaw in 9 of 10 tests, exposing risks around AI agents, weak authorization, and ...