Apple is working to fix a serious bug in its Mac operating system.
The flaw in the most recent MacOS High Sierra allows anyone to access a locked Mac using the username “root” and no password.
The flaw, discovered a couple of weeks ago and disclosed in an Apple developer support forum, has been shown to work within the software’s user preferences screen, among other locations.
Once triggered, the same combination of username/no password will also bypass the lock screen of Macs running Apple’s latest operating system, granting administrator rights.
Apple said it was “working on a software update to address this issue” and advised users to set a root password to prevent unauthorized access to Mac computers.
Experts also warn against trying out the bug for yourself, as once enabled the flaw can then be more easily exploited even on a locked Mac.