Google Gemini Desktop (3 Oct): testing Mac “Additional sandbox options” — full-disk/app/web control not live; Google unconfirmed
BleepingComputer (3 October 2026), citing TestingCatalog on X, reports Google is testing desktop-control capability in the Gemini Desktop macOS app, including a hidden “Additional sandbox options” setting. Wire description: when enabled, Gemini could read/create/modify/delete files outside explicitly connected folders, open apps, browse the web, and act through Mail/Safari/Messages without asking permission every time; UI copy says expanded access may allow actions without prior permission depending on settings. Feature is not live and Google has not publicly confirmed the rollout. Wire says Gemini would still prompt before purchases, money transfers, creating accounts, accepting legal terms, or modifying sensitive personal information. Context: Apple’s 2 Oct Full Disk Access hardening for AI-agent risk (desk apple-macos-fda-ai-agents-20261002). Wire-primary until Google publishes Gemini Desktop / computer-use docs. Primary: BleepingComputer 3 Oct.
- Product
- Google Gemini Desktop (macOS) — Additional sandbox options / computer-use (testing)
- Versions
- n/a — not generally available; hidden setting observed in testing builds per wire; no CVE
- Exploited in Australia?
- unknown
- Patch to
- Mac admins: inventory Gemini Desktop installs; do not enable undocumented sandbox/full-access toggles on managed endpoints until Google documents scope. Align with Apple FDA audit (desk apple-macos-fda-ai-agents). Treat as wire until Google ships confirmed docs.
Primary: BleepingComputer — Gemini Desktop Mac full-access sandbox options under test (3 Oct 2026) · Vendor: Google Gemini (product — no matching public Desktop sandbox advisory yet) · Apple Developer News — macOS Full Disk Access updates framed for AI agents (2 Oct 2026)