12.0.5 Updated Release Notes: macOS Agents (build 12.0.5.184)

Release Schedule

Privilege Manager Release: April 21, 2026

Affected Versions

macOS Agent Software

12.0.5.184 Privilege Manager macOS Agent (macOS Ventura 13 and later)

Installation Notes

Privilege Manager exclusively supports operating systems (OS) that have not reached their official End of Support. For optimal performance and compatibility, it is recommended to utilize Privilege Manager on a supported and actively maintained OS.
Delinea recommends as a best practice to create system restore points prior to doing system changes such as patches.

Delinea supports the use of software versions up to a year prior to the current version. You can find previous versions of the documentation here.

Enhancements

Identifier	Release Notes
701158	A new Configuration Feed, Application Monitoring - AI Tools, is now available under Application Control Solution. This feed provides monitoring policies, dedicated computer groups, and summary reports to help customers gain visibility into common AI tool usage across their managed endpoints. The AI Tools - Windows Monitor Mode and AI Tools - macOS Monitor Mode policies detect execution of popular AI applications including ChatGPT, Claude, Claude Code, Microsoft Copilot, Cursor, Windsurf, Ollama, LM Studio, and Antigravity. The included computer groups (AI Tools - Windows Computers and AI Tools - macOS Computers) are delivered with filter rules that do not match any machines by default, allowing customers to configure their monitoring scope when ready. Dedicated summary reports (AI Tools Windows Events Summary and AI Tools macOS Events Summary) display File Name, Product, Event Count, and Last Event for easy analysis of AI adoption in your environment. Customers can extend coverage by duplicating policies and adding custom filters for additional AI tools. Install from Admin \| Config Feeds \| Application Control Solution. See AI Tools Monitoring.

Identifier

Release Notes

701158

A new Configuration Feed, Application Monitoring - AI Tools, is now available under Application Control Solution. This feed provides monitoring policies, dedicated computer groups, and summary reports to help customers gain visibility into common AI tool usage across their managed endpoints. The AI Tools - Windows Monitor Mode and AI Tools - macOS Monitor Mode policies detect execution of popular AI applications including ChatGPT, Claude, Claude Code, Microsoft Copilot, Cursor, Windsurf, Ollama, LM Studio, and Antigravity. The included computer groups (AI Tools - Windows Computers and AI Tools - macOS Computers) are delivered with filter rules that do not match any machines by default, allowing customers to configure their monitoring scope when ready. Dedicated summary reports (AI Tools Windows Events Summary and AI Tools macOS Events Summary) display File Name, Product, Event Count, and Last Event for easy analysis of AI adoption in your environment. Customers can extend coverage by duplicating policies and adding custom filters for additional AI tools. Install from Admin | Config Feeds | Application Control Solution. See AI Tools Monitoring.

Fixed Issues

Identifier	Release Notes
718140	(macOS only) Application control policies with exclusion filters now correctly evaluate against the child process path instead of the parent process path with macOS agent version 12.0.5.184. Previously, when a policy matched a child process via its parent (e.g., system binaries spawned by a monitored application), exclusion filters would not fire, resulting in excessive policy events for processes like /bin/zsh, git, and other system binaries. Electron-based applications (such as Windsurf, Cursor, and similar tools) now display their actual application name in Policy Reports instead of showing as "Electron".

Identifier

Release Notes

718140

(macOS only) Application control policies with exclusion filters now correctly evaluate against the child process path instead of the parent process path with macOS agent version 12.0.5.184. Previously, when a policy matched a child process via its parent (e.g., system binaries spawned by a monitored application), exclusion filters would not fire, resulting in excessive policy events for processes like /bin/zsh, git, and other system binaries. Electron-based applications (such as Windsurf, Cursor, and similar tools) now display their actual application name in Policy Reports instead of showing as "Electron".