The following are recommended actions for those Mas OSX High Sierra 10.13 or greater users: Mac OS's prior to High Sierra 10.13 or greater.Systems with Apple Remote Desktop (ARD) enabled.Systems with local console access, such as shared usage computers in teaching or lab environments, where users of shared computers are not privileged with root access.

If a Root User is already enabled, to ensure a blank password is not set, please follow the instructions from the 'Change the root password' section.'Ĭurrently, this vulnerability is only detected in users with a Mac OS that has been upgraded to High Sierra 10.13 or greater. To enable the Root User and set a password, please follow the instructions here. In the meantime, setting a root password prevents unauthorized access to your Mac. Until further notice, Apple has issued the following statement: 'We are working on a software update to address this issue.

Apple is working on a permanent software fix for the issue.

This vulnerability allows anyone to login to a Mac device and change administrative settings by typing in the username 'root' with no password.

For more information, please click here.Ī security flaw has been detected in Mac operating systems (OSX) High Sierra 10.13 and greater. The update was automatically installed on all systems running the latest version (10.13.1) or greater of Mac OS High Sierra. Update: Apple released a special security update for macOS High Sierra, solving a recently uncovered flaw which would let people gain root access without entering a password. Vulnerability in Mac OSX High Sierra 10.13 and Greater

Mac update 10.13