Apple Tightens macOS Full Disk Access Controls Due to AI Agent Risks

Apple Inc. announced on October 2, 2026, that it is introducing new controls for its macOS operating system's "Full Disk Access" permission setting. The technology company cited new risks posed by increasingly capable artificial intelligence (AI) agents as the reason for the change, according to AI Weekly, TechCrunch, and Ars Technica.

The move by Apple aims to address concerns that AI agents, which can run on desktop computers, might gain broad access to users' sensitive data, including files, messages, mail, and browsing history. While Full Disk Access (FDA) was originally designed to facilitate proper functioning of features like backups, Apple stated that AI agents have heightened the risks associated with this level of access, according to TechCrunch.

Apple's announcement follows recent reports highlighting potential privacy vulnerabilities related to AI applications. TechCrunch reported that the decision comes days after Inc. columnist Jason Aten claimed that Meta's Muse app on Mac read his private messages, a claim that Meta disputed. Aten reported that Muse knew the content of his private messages despite his assertion that he had not granted the AI agent permission to do so. This incident, according to TechCrunch, raised questions regarding the level of security and trust users place in desktop-based AI, which can control system functions and access user files and communications.

Additionally, TechCrunch noted that the decision also follows a report by Wired which cited a flaw in ChatGPT’s Mac application that could have potentially allowed hackers to access sensitive user data. These incidents underscore the growing concerns surrounding the extensive permissions that AI agents might seek or inadvertently gain on personal computing devices.

Full Disk Access is a macOS setting that, when enabled for an application, grants it permission to access a wide array of user data, including files, email, messages, and internet browsing history, according to TechCrunch. In the case of Meta's Muse app, it optionally allows users to enable this setting, as reported by TechCrunch.

In a blog post directed at developers, Apple stated, "Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems…without users’ full knowledge and understanding," according to TechCrunch. The company emphasized that going forward, the new controls are intended to ensure that users who genuinely wish to grant an app this "extraordinary level of access" can do so only through "very explicit user action."

Understanding the Change in Controls

The update to macOS permissions is designed to enhance informed consent rather than to impose new limitations on applications, as clarified by a correction note in a TechCrunch article. This means that while the process for granting Full Disk Access will become more explicit, the ability for users to grant such permissions for specific applications will remain.

Apple's commitment to user data and privacy was reiterated in its statement. "Addressing this is critical. As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially," Apple wrote, according to TechCrunch. The company further stated, "We are committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy."

The tightening of these controls reflects a broader industry response to the evolving capabilities of AI and the potential for these technologies to interact with vast amounts of personal data. Desktop-based AI agents, by their nature, allow users to provide their respective applications with greater access to content on their computers, including files, messages, and other personal information, by adjusting macOS settings, as explained by TechCrunch.

The changes are expected to roll out in future macOS updates. Apple has not yet specified the exact timeline for the implementation of these new controls, but its public statements indicate an urgent focus on mitigating potential privacy and security risks associated with AI agents.

The company's proactive stance aims to balance the utility and innovation offered by AI agents with the fundamental need for user privacy and data security. By requiring more explicit user action for Full Disk Access, Apple seeks to empower users with greater control and understanding over which applications can access their sensitive information.

This development highlights the ongoing challenge for technology companies in managing the permissions and access levels of increasingly sophisticated software, particularly as AI capabilities advance rapidly. The focus on "very explicit user action" suggests a shift towards a more granular and transparent permission system for critical data access on macOS devices.

Industry observers will be watching to see how these new controls are implemented and how they impact both AI developers and end-users. The goal, as articulated by Apple, is to ensure that users are fully aware of the implications before granting applications extensive access to their personal data, especially as AI agents continue to evolve in their autonomy and capabilities.