On 28 November, a root vulnerability was discovered by a user in which the root account can be accessed by entering a blank password. **This affects all users.**

See the gif below for proof of concept:  
[![proof of concept of root bypass][1]][1]
*Credit: [techcrunch](http://techcrunch.com/2017/11/28/astonishing-os-x-bug-lets-anyone-log-into-a-high-sierra-machine)*

This flaw is also present on the lock screen, if there is an 'other' option or you log in with a name and password.

This can also be exploited through the command line and the Guest user account, if enabled.

**How can I protect myself?**

  [1]: https://i.sstatic.net/eovoa.gif