Google’s Gemini could soon access any file on your macOS device, open apps, browse the web, and perform actions without asking for permission every time.
As spotted by TestingCatalog on X, Google is testing desktop control for Gemini, and there are references to a new hidden “Additional sandbox options” setting in the Gemini Desktop app.
The feature isn’t live yet, and Google hasn’t confirmed it either, but when enabled, Google Gemini could read, create, modify, or even delete files anywhere on your PC.
That means Gemini will have access to files outside folders you have explicitly connected to Gemini.
It’s unclear how the feature will play out, as Apple is considering making it difficult for AI agents to access personal files and data on Mac.
According to a pop-up within Gemini Desktop, Google’s AI could also communicate with apps such as Mail, Safari, or Messages and perform actions through them.
“By enabling additional sandbox options, you will be able to expand what Gemini can do and access on your Mac,” Google explains in the hidden interface.
“Depending on which settings you enable, Gemini may be permitted to take actions without asking for your permission first.”
Gemini would still ask before sensitive actions
Google is not giving Gemini unlimited control without any safeguards, and you can expect a Claude-like experience, where you explicitly give it permission to use your PC.
Gemini would still ask for confirmation before buying products or transferring money, creating an online account, accepting legal terms on your behalf, or modifying sensitive information about you.
The setting appears to be part of Google’s broader computer-use plans for Gemini, where the AI would be able to work across files, websites, and native apps instead of being limited to a chat window.
It’s unclear when Google plans to roll out Full Access or which Gemini model will power it.
Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.
