Security researcher Ian Carroll used the AI tool Claude Opus 4.7 to discover a flaw in Front Gate Tickets, which handles ticketing for major US music festivals. With Claude's help, he was able to exploit this bug and gain full access to millions of customer records, issuing free VIP passes at will.

Carroll did not abuse his superpower, instead reporting the issue to Front Gate, who patched it swiftly. However, the incident raises questions about the vulnerability of ticketing systems and the capabilities of AI in uncovering such flaws.

The security researcher's journey began when he noticed that Front Gate Tickets managed tickets for nearly every major US music festival. Intrigued by this monopoly, Carroll sought to test their web vulnerabilities and found a SQL injection flaw. Claude Opus 4.7 quickly bypassed the web application firewall, coding a script to access customer information.

While Front Gate claims there is no evidence of exploitation or compromise of user data, Carroll counters that he gained super-administrator privileges without any response from the company. The incident highlights the potential for AI tools in uncovering and exploiting vulnerabilities, even when firewalls are present.