A major bug in Apple’s macOS High Sierra gives anyone with physical access to a system running the latest version of the OS root access simply by putting “root" in the user name field.

Link: https://threatpost.com/critical-apple-login-bug-puts-macos-high-sierra-systems-at-risk/129028/