SecurityAgent taking focus for plugin in macOS 26.1

Privacy & Security General Security Security Interface

Created Nov ’25

Replies 27

Boosts 3

Views 6.4k

Participants 6

We have a custom SecurityAgentPlugin that is triggered by multiple authorizationdb entries. Some customers report that the SecurityAgent process takes window focus even though no UI or windows are displayed.

Our plugin explicitly ignores the _securityAgent user and does not show any UI for that user. However, in macOS 26.1, it appears that the plugin still causes the SecurityAgent to take focus as soon as it is triggered.

Is this a change in macOS 26.1 or a bug? Can we do anything to prevent "focus stealing"?

danseals OP

Mar ’26

Filed FB22119525 with detailed unified log captures and a minimal reproducer. Includes side-by-side log comparisons of the same authorization request (AssetSonar requesting system.privilege.admin) with and without SecurityAgent spawning, showing the focus steal chain.

DTS Engineer OP

Apple

Mar ’26

Filed FB22119525 with detailed unified log captures and a minimal reproducer.

Thanks for that, and for the detailed analysis.

I had a look at your bug, and the earlier FB20987979, and they’ll both likely end up duplicated to a bug filed by another developer, FB21639147. However, I’ve updated that ‘lead’ bug to highlight the analysis in your bug.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"