Apple Plans Stronger macOS Full Disk Access Controls Amid AI Agent Risks
Summary
Apple plans to require clearer user action before apps receive macOS Full Disk Access, citing risks to private data from AI agents. The timing of the new controls is unknown.
Key points
- Full Disk Access can let an app read and write files and access data from apps such as Mail, Messages, and Safari.
- Apple says some developers use the permission in ways that may expose users' data without their full understanding.
- Apple plans updates so this level of access is granted only through explicit user action; it has not announced a rollout date.
- The announcement follows a report that Meta's Muse agent accessed a journalist's iMessages after Full Disk Access was granted.
- Meta says Muse needs both macOS Full Disk Access and its opt-in Messages connector to read Messages content.
- A separate Muse Mac app vulnerability that could expose dictation traffic and enable prompt injection has been patched, according to the article.
Article Details
- Event Type
- Apple announced plans to tighten macOS Full Disk Access controls in response to privacy and security risks associated with AI agents.
- Impact
- Full Disk Access can expose files, messages, email, browsing history, and other system data. Apple said it plans to require explicit user action for this access, but did not provide a rollout date. Meta said Muse requires both Full Disk Access and its Messages connector to read Messages content. A reported Muse vulnerability was patched; a separate vulnerability in OpenAI's ChatGPT app for Mac was tracked as CVE-2026-100754.
CVE
People
Vendors
AppleApple has announced that it's taking steps to tighten controls around a macOS setting called Full Disk Access (FDA) due to security risks posed by artificial intelligence (AI) agents.Metadid not take any specific name, the development appears to be a response to a recent report about how Meta's Muse agentic tool accessed a journalist's private iMessages after they granted it Full Disk Access. MuseOpenAIhas also been acknowledged for reporting another vulnerability, tracked as CVE-2026-100754, impacting OpenAI's ChatGPT app for Mac that could have been abused to take over the AI assistant and grant an attacker
Products
ChatGPTbeen acknowledged for reporting another vulnerability, tracked as CVE-2026-100754, impacting OpenAI's ChatGPT app for Mac that could have been abused to take over the AI assistant and grant an attacker unauthorizedFull Disk AccessApple has announced that it's taking steps to tighten controls around a macOS setting called Full Disk Access (FDA) due to security risks posed by artificial intelligence (AI) agents.macOSApple has announced that it's taking steps to tighten controls around a macOS setting called Full Disk Access (FDA) due to security risks posed by artificial intelligence (AI) agents.Musenot take any specific name, the development appears to be a response to a recent report about how Meta's Muse agentic tool accessed a journalist's private iMessages after they granted it Full Disk Access. Muse is