Gemini may get broad access to files and apps on macOS

Google's Gemini assistant could soon be able to reach any file on a macOS device, open applications, browse the web and carry out actions without requesting permission for each step, according to a report published by BleepingComputer on 3 October 2026.

The report describes a shift in how the assistant would operate on a personal computer. Rather than answering questions in a window, the software would be able to act on the machine itself. BleepingComputer says this would include access to files on the device, the ability to launch apps, and web browsing, with actions performed without a per-action permission prompt.

That last detail is the one that matters most for security. A prompt before each action is, in practice, the main point at which a user can notice that an assistant is about to do something unexpected and stop it. Removing that checkpoint means the assistant's decisions are carried out directly. The breadth described in the report — files, applications and the web in one package — also means the same component that reads untrusted content from the internet would be the component with access to local documents.

Several important questions are not answered by the available reporting. It is not clear from the source when the capability would ship, whether it would be enabled by default, which macOS versions would be covered, or what controls Google would offer to limit which folders or applications the assistant can touch. Nor is it clear whether any permission step would remain at setup time, such as a one-off grant that then covers later actions. Readers should treat the capability as reported rather than confirmed behaviour in a shipping product.

MacOS already requires applications to request access to certain protected locations and to screen recording and automation features. How an assistant with the described reach would interact with those existing operating system prompts is not addressed in the source material.

For organisations, the practical question is whether such an assistant would be installable on managed Macs and whether administrators could restrict it. Again, the report does not say. Security teams that allow staff to install consumer AI tools on work laptops may want to decide their position before the feature arrives, rather than after.

Google has not published a statement on the capability in the material available. The Agentic Times will report on the company's own documentation when it appears, including any detail on default settings, scope limits and audit logging. Until then, the reported ability to act on local files without a per-action prompt is the single detail worth tracking.