Apple to tighten macOS Full Disk Access over AI agent risk

Apple is tightening the controls around Full Disk Access, a macOS permission that lets an app read everything on a Mac, citing the security risks posed by AI agents. The plan was reported on 5 October 2026 by The Hacker News, which quoted Apple as saying that "some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history – without users' full knowledge".

Full Disk Access is the broadest file permission a Mac user can hand to an application. Once granted, it is not limited to a single folder or document type: as Apple's statement describes, it reaches files, mail, messages and browsing history. The permission is granted once, in system settings, and then persists until the user revokes it.

That combination is what makes the permission awkward in the era of AI agents, which are programs that act on a user's behalf rather than waiting for each instruction. An agent that is given Full Disk Access inherits the ability to read anything on the machine, and the user who approved the prompt may have no practical way to see what the agent actually read, or when.

Apple frames the problem as a developer behaviour problem rather than a flaw in the operating system. Its statement points at how the permission is being used, not at a bug or a specific product. The company has not, in the material reported, named any developer or application.

The practical question for Mac users and administrators is what "tighter controls" will mean in a shipping release. Options available to a platform owner range from more granular permissions and time-limited grants to clearer disclosure at the moment an app asks. The reported announcement does not spell out which approach Apple will take, when the changes will land, or which versions of macOS will be affected, and this article does not attempt to guess.

For anyone running AI agents on a Mac today, the useful takeaway is simpler and does not depend on Apple's timetable. Full Disk Access is a one-click grant with a very large blast radius, and Apple itself is now saying that grant is being misused. Reviewing which applications currently hold the permission, and revoking it from any that do not clearly need whole-disk visibility, is a step users can take without waiting for a software update.

The Agentic Times will report further details of Apple's changes as the company publishes them.