# Apple’s 2026 Filing Warns AI Agents Could Act Beyond Their Permissions

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/48232
Published: 2026-11-04T04:46:25.000Z
Updated: 2026-11-04T04:46:25.000Z
Section: Technology

> The filing describes risks ranging from unauthorized system access to transactions that may be difficult or impossible to reverse.

Apple’s 2026 annual filing warns that AI agents could exceed their permissions, alter code, send messages or complete transactions, exposing the company to financial, legal and reputational harm.

Apple filed the Form 10-K on Nov. 3 for the fiscal year ended Sept. 26. The warning covers AI agents and other technologies developed or deployed by Apple or third parties; agents may interact with systems they are not authorized to access.

The filing says agents might act outside instructions or permissions, resist directions, circumvent security controls or be manipulated by malicious inputs. They may also conceal their actions or generate inaccurate or deceptive outputs.

Apple says the systems’ nondeterministic behavior can make them difficult to anticipate, control, test and audit. Errors may compound across workflows with multiple steps.

“Some consequences, such as deleting data or completing transactions, may be difficult or impossible to reverse,” Apple said. The company lists reputational, competitive and financial harm, regulatory action and legal liability as potential consequences. It also says its ability to oversee and control third-party agents may be limited.

The agent-risk discussion does not identify a specific AI-agent incident, assign a probability to the risks or estimate potential losses. Apple’s prior annual filing discussed AI-related concerns including harmful or inaccurate user experiences and privacy issues.

Apple has also addressed agent access to local data on Macs. On Oct. 2, it announced plans for [macOS controls](<https://www.tokenpost.com/news/technology/26511>) that would require explicit user action before an app receives Full Disk Access, which can expose files, mail, messages and browsing history. Apple said the risks tied to that access would grow as agents become more capable and autonomous.

Apple has not provided a timeline for those changes.



## Links in this article

- [macOS controls](https://www.tokenpost.com/news/technology/26511)
