Apple Tightens macOS Full Disk Access Controls, Citing Risks from AI Agents

Apple has announced additional controls for the “Full Disk Access” setting on macOS, saying users will soon be able to grant apps that extraordinary level of access only through “very explicit user action.” The move comes as AI agents become more capable and autonomous, increasing the risks associated with such permissions, according to a blog post aimed at developers.

Full Disk Access was designed to allow backups to function properly, but it gives an app permission to access files, mail, messages, and even browsing history. Apple said some developers are using Full Disk Access in ways that could put users at risk, “exposing everything on their systems…without users’ full knowledge and understanding.”

The announcement follows a journalist’s claim that Meta’s Muse app on Mac read his private messages without permission, which Meta disputed, and a separate report about a flaw in ChatGPT’s Mac app that could have allowed hackers to access sensitive data. Desktop-based AI agents often require users to adjust macOS settings to grant the apps broader access to files and personal content.

“As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially,” Apple wrote. The company said it is committed to ensuring users clearly understand these risks before granting such access. Apple did not respond to a request for comment.