Apple’s Full Disk Access warning: mind the all-access pass

The helpful little app would like the run of your digital house. How very convenient, droogies. Before handing over the all-access pass, viddy what it actually opens.

Permission design: change promised

Apple’s October 2 developer notice says it will add controls requiring more explicit user action to grant Full Disk Access. The permission can expose files, mail, messages and browsing history; communications can implicate other people’s privacy, too. Apple specifically warns that increasingly capable, autonomous AI agents raise the stakes.^[1]

The notice gives no rollout date or macOS version. It names no developer and does not tie the change to the ChatGPT flaw below.^[1]

Patch column: a confirmed fix

OpenAI’s September 25 changelog confirms that CVE-2026-100754 was fixed on macOS in version 26.924.20706, crediting Patrick Wardle of the Objective-See Foundation. That entry does not specify the affected-version range.^[2]

Attack story: keep the conditions attached

WIRED’s October 2 reporting describes an untrusted local script using a trusted interpreter to get commands accepted by ChatGPT. Potential consequences included access to chat logs and commands aimed at browsers or other apps. The report identifies no confirmed malicious exploitation. It does not establish Full Disk Access as a prerequisite.^[3]

The Droog verdict

A cheerful interface is a poor reason to give software every key you own. The useful test is dull enough to frighten a product demo: what can this thing reach, and why does today’s job need it?

• Keep the Mac app current and verify that its version includes the 26.924.20706 security fix.
• Review broad permissions and remove access you no longer need.
• Judge Apple’s promised controls when their actual design and availability are announced.^[1][2]

Splendid assistants are welcome. An unexplained all-access pass deserves a raised eyebrow.