On 28 November, a root vulnerability was discovered by a user in which the root account can be accessed by entering a blank password. **This affects all users.**

[Tech Crunch][1] as an animated gif showing how this works if you use an authentication dialog:  

[![enter image description here][2]][2]

This flaw is also present on the lock screen, any guest or non-admin accounts as well. Additionally, if there is an 'other' option or you log in, through vnc/file sharing / screen sharing your root user could be enabled with no password to protect access. 

**How can I protect myself?**


  [1]: http://techcrunch.com/2017/11/28/astonishing-os-x-bug-lets-anyone-log-into-a-high-sierra-machine
  [2]: https://i.sstatic.net/ATBpe.png