{"id":82877,"date":"2017-11-30T11:10:28","date_gmt":"2017-11-30T19:10:28","guid":{"rendered":"https:\/\/securingtomorrow.mcafee.com\/?p=82877"},"modified":"2025-08-13T22:57:58","modified_gmt":"2025-08-14T05:57:58","slug":"security-flaw-high-sierra-macs","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/internet-security\/security-flaw-high-sierra-macs\/","title":{"rendered":"Massive Security Flaw for High Sierra Macs Emerges"},"content":{"rendered":"

When it comes to cybersecurity, we\u2019ve seen our fair share of device flaws. Sometimes, hackers leverage these vulnerabilities to execute complicated attacks that compromise your data. And sometimes, there are flaws that hardly require cybercriminals to lift a finger. Just yesterday, a massive flaw emerged that embodies the latter. This vulnerability<\/a> is found in High Sierra Macs, and allows anyone to log into a device just by typing \u201croot\u201d in the user name field.<\/p>\n

How it works<\/strong><\/h2>\n

Anyone can access this flaw<\/a> by first going to \u201cSystem Preferences\u201d on the home page of a Mac computer and then entering one of the panels that has a lock in the lower left-hand corner. This is usually where you would go to enter in your name and password, which is required when installing an application or changing settings. From there, simply type “root” as a username, leave the password field blank, click “unlock” twice, and you\u2019ll immediately gain full access to the device.<\/p>\n

This essentially means that anyone that gets their hands on your computer could gain the deepest level of access to your device, otherwise known as “root” privileges. They could add administrators, change critical settings, even lock out the current owner.\u00a0What\u2019s more \u2013 this flaw could allow malware to install itself deep within your computer, especially since no password is required for access.<\/p>\n

Fortunately, Apple has stated that a fix is on the way and workaround is available in the interim. They explained, \u201cin the meantime, setting a root password prevents unauthorized access to your Mac. To enable the Root User and set a password, please follow the instructions here: https:\/\/support.apple.com\/en-us\/HT204012. If a Root User is already enabled, to ensure a blank password is not set, please follow the instructions from the \u2018Change the root password\u2019 section.\u201d<\/p>\n

How to stay protected<\/strong><\/h2>\n

So, the next question is \u2013 what can you do to ensure your Mac stays secure? Start by following these tips:<\/p>\n