Apple to tighten macOS Full Disk Access

Apple (AAPL) announced on October 2, 2026 that it will tighten macOS Full Disk Access controls to address risks linked to autonomous AI agents. Full Disk Access allows applications to reach a wide range of user data on a Mac, making it a sensitive permission in the operating system’s security model.

The company said that, in the future, apps requesting Full Disk Access will only be able to obtain it through a very explicit user action. The goal is to ensure that people clearly understand the scope and risk of the access they are granting before they approve it.

Apple positioned the change as a response to growing concerns that autonomous or continuously running AI assistants may request broad filesystem privileges. Such agents can, in principle, reach files and other personal information if given sweeping disk permissions, increasing the potential impact of design flaws or vulnerabilities.

The announcement comes after increased public attention on how desktop AI clients interact with local data. Reports indicated that Meta’s (META) Muse desktop AI assistant appeared to access a journalist’s private Messages database on a Mac, raising questions about how much information such apps can read once granted broad permissions.

In a separate case, reporting highlighted a vulnerability in the ChatGPT Mac application. The app had been storing users’ chat histories locally in unencrypted plain text on their machines, creating an exposure risk if other software or local users could read those files.

Following the disclosure, OpenAI issued an emergency update to the ChatGPT Mac client that encrypted stored conversations. This change reduced the risk that locally saved chats could be easily accessed in readable form from the device’s storage.

Apple has not specified when the updated Full Disk Access controls will be delivered to users. No release date or software version has been announced, leaving developers and IT administrators watching for further technical details.

The absence of a timeline means that, for now, existing permission flows remain in place, while the planned changes signal a shift toward more explicit user involvement for high‑risk permissions. Developers of AI assistants and other tools that rely on broad disk access will need to adapt once the new requirements take effect.

Taken together, Apple’s planned changes and the recent incidents involving Muse and the ChatGPT Mac app underline a heightened focus on how desktop AI software handles sensitive local data. The evolving controls on macOS are intended to narrow the conditions under which such software can access the full contents of a user’s device.