Apple Adds Controls to macOS Full Disk Access Over AI Agent Risks
The company is introducing safeguards around high-level storage permissions as autonomous software expands the desktop attack surface.
Apple is introducing additional controls around the Full Disk Access permission in macOS, warning that the emergence of autonomous artificial intelligence agents has heightened security risks associated with high-level storage privileges, as reported via Techmeme (https://www.techmeme.com/261002/p19#a261002p19) citing reporting by TechCrunch's Sarah Perez.
Full Disk Access is among the most sensitive permission tiers in macOS, allowing designated applications to bypass standard sandbox restrictions and read, modify, or manage files across connected volumes. Historically, the permission was primarily used by administrative utilities, backup software, and enterprise security tools requiring broad system visibility.
The rise of desktop AI agents—software tools designed to index local content, interpret natural language instructions, and autonomously carry out multi-step file operations—has led more applications to request comprehensive disk access. Because these agents process untrusted external data and non-deterministic user prompts, granting them broad system visibility introduces new vulnerabilities, including prompt injection attacks that could lead to unintended data retrieval or unauthorized file modifications.
Apple's planned safeguards aim to restrict the potential blast radius of compromised agents by tightening oversight on how applications request and exercise full disk privileges. The changes will require third-party developers building AI productivity tools on macOS to adapt their architectures toward more narrowly scoped file access models.
Sources
Written by
The Company Wire
Inside the companies building what’s next. Reporting on startups, technology, funding and the people shaping them.
