Found a vulnerability in Mac OS High Sierra that allows superuser to log into an unprotected computer

, , System Preferences > Users & Groups , , root . (sic!) Unlock «» MacOS .

.

, .




, root ( , ). — :

sudo passwd -u root

(). , GUI.

Update

TechCrunsh, Apple :

We are working on a software update to address this issue. In the meantime, setting a root password prevents unauthorized access to your Mac. To enable the Root User and set a password, please follow the instructions here: support.apple.com/en-us/HT204012. If a Root User is already enabled, to ensure a blank password is not set, please follow the instructions from the ‘Change the root password’ section.

, . , root, . root , , .

Update 2

( xi-tauw):
— 20- .
— Apple 13- .

Update 3

, root , . — root .
sergius_the_black .

Update 4

, , , .
vagonovozhaty .