Apple announced plans to introduce stricter controls for the macOS Full Disk Access setting to mitigate privacy and security risks introduced by autonomous AI agents. The company noted that certain application developers are using Full Disk Access in ways that expose system files, messages, emails, and web browsing histories without sufficient user understanding.
High Privileges on macOS
Introduced in macOS Mojave version 10.14, Full Disk Access allows designated programs to bypass standard system security boundaries. Once authorized, an application can read and modify sensitive files across system directories and access data from native services like Mail, Messages, Safari, and Time Machine backups. While required for security tools and backup software to function, the setting effectively bypasses controls designed to protect personal data.
Heightened Risks from AI Tools
Apple stated that as AI agents gain autonomy, granting broad system access increases risks to personal data and the privacy of contacts. The announcement follows reports regarding Meta's Muse AI agent, which operates on cloud virtual machines. Responding to data access concerns, Meta CTO David Singleton stated that Muse requires both system-level Full Disk Access and an explicit opt-in setting for its Messages connector before reading message contents.
Vulnerabilities Target Privileged Apps
Security researcher Patrick Wardle recently demonstrated a proof-of-concept exploit for a zero-day vulnerability in Muse's Mac client named not-a-mused. The flaw allowed local processes to exploit an undocumented setting, capture dictation audio, inject prompts, and abuse the permissions granted to the app. Wardle was also credited with discovering CVE-2026-100754 in OpenAI's ChatGPT app for Mac, which permitted unauthorized access to chat logs and stored data.
Apple indicated that future macOS updates will require explicit user actions before granting Full Disk Access, though the company has not yet provided a rollout timeline.
AI-generated editorial illustration; not a documentary photograph.
Source: Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access
SIGNAL TITANS
Leave a Reply