macOS High Sierra 10.13.2 Beta 6 Fixes Root Password Vulnerability

The newest beta of macOS High Sierra 10.13.2 fixes a major macOS High Sierra vulnerability that enabled the root superuser on a Mac with no password and no security check.

Apple on Wednesday released a security update to fix the problem on machines running the current release version of macOS High Sierra, 10.13.1, but the bug has remained in macOS 10.13.2 until today.


Developers and public beta testers who are running macOS 10.13.2 should update to beta 6 right away to protect their Macs. MacRumors has confirmed that the vulnerability, which involved entering the username "root" with no password in the Users & Groups section of System Preferences, is no longer functional.

Entering "root" without a password in lieu of an administrator's username and password no longer unlocks a Mac.

When releasing the fix for macOS High Sierra 10.13.1, Apple apologized for the oversight and said it would audit its development processes to prevent something similar from happening in the future.

"We greatly regret this error and we apologize to all Mac users, both for releasing with this vulnerability and for the concern it has caused," read a statement from Apple provided to MacRumors.

Related Forum: macOS High Sierra

Popular Stories

iPhone SE 4 Vertical Camera Feature

iPhone SE 4 Production Will Reportedly Begin Ramping Up in October

Tuesday July 23, 2024 2:00 pm PDT by
Following nearly two years of rumors about a fourth-generation iPhone SE, The Information today reported that Apple suppliers are finally planning to begin ramping up mass production of the device in October of this year. If accurate, that timeframe would mean that the next iPhone SE would not be announced alongside the iPhone 16 series in September, as expected. Instead, the report...
iPhone 17 Plus Feature

iPhone 17 Lineup Specs Detail Display Upgrade and New High-End Model

Monday July 22, 2024 4:33 am PDT by
Key details about the overall specifications of the iPhone 17 lineup have been shared by the leaker known as "Ice Universe," clarifying several important aspects of next year's devices. Reports in recent months have converged in agreement that Apple will discontinue the "Plus" iPhone model in 2025 while introducing an all-new iPhone 17 "Slim" model as an even more high-end option sitting...
Generic iPhone 17 Feature With Full Width Dynamic Island

Kuo: Ultra-Thin iPhone 17 to Feature A19 Chip, Single Rear Camera, Semi-Titanium Frame, and More

Wednesday July 24, 2024 9:06 am PDT by
Apple supply chain analyst Ming-Chi Kuo today shared alleged specifications for a new ultra-thin iPhone 17 model rumored to launch next year. Kuo expects the device to be equipped with a 6.6-inch display with a current-size Dynamic Island, a standard A19 chip rather than an A19 Pro chip, a single rear camera, and an Apple-designed 5G chip. He also expects the device to have a...
iPhone 16 Pro Sizes Feature

iPhone 16 Series Is Less Than Two Months Away: Everything We Know

Thursday July 25, 2024 5:43 am PDT by
Apple typically releases its new iPhone series around mid-September, which means we are about two months out from the launch of the iPhone 16. Like the iPhone 15 series, this year's lineup is expected to stick with four models – iPhone 16, iPhone 16 Plus, iPhone 16 Pro, and iPhone 16 Pro Max – although there are plenty of design differences and new features to take into account. To bring ...
icloud private relay outage

iCloud Private Relay Experiencing Outage

Thursday July 25, 2024 3:18 pm PDT by
Apple’s iCloud Private Relay service is down for some users, according to Apple’s System Status page. Apple says that the iCloud Private Relay service may be slow or unavailable. The outage started at 2:34 p.m. Eastern Time, but it does not appear to be affecting all iCloud users. Some impacted users are unable to browse the web without turning iCloud Private Relay off, while others are...
iPhone 17 Plus Feature Purple

iPhone 17 Rumored to Feature Mechanical Aperture

Tuesday July 23, 2024 9:32 am PDT by
Apple is planning to release at least one iPhone 17 model next year with mechanical aperture, according to a report published today by The Information. The mechanical system would allow users to adjust the size of the iPhone 17's aperture, which refers to the opening of the camera lens through which light enters. All existing iPhone camera lenses have fixed apertures, but some Android...

Top Rated Comments

iShater Avatar
87 months ago
Apple, please go back to basic. Reduce number of models. Lower the prices. Work on Mac mini, $649 iPhone X1, iPad running macOS, ...
You remember back in the day when there were bazillion models and nobody could tell the difference between them? bad days.
Score: 2 Votes (Like | Disagree)
Swift Avatar
87 months ago
Latest style at Apple sites: the anti-fanboy!
Score: 2 Votes (Like | Disagree)
realeric Avatar
87 months ago
Apple, please go back to basic. Reduce number of models. Lower the prices. Work on Mac mini, $649 iPhone X1, iPad running macOS, ...
Score: 1 Votes (Like | Disagree)
TsMkLg068426 Avatar
87 months ago
Apple time to get into technology not what looks cool and overpriced for just fanboys.
Score: 1 Votes (Like | Disagree)
amaze1499 Avatar
87 months ago
What Mac are you running? I’ve never had an issue getting a beta installed.
That’s why it’s called beta testing. Thanks.
Score: 1 Votes (Like | Disagree)
Kaibelf Avatar
87 months ago
Not that heated, just disgusted. This has become an exercise in frustration. It appears that Apple doesn't care how frustrating they make it for the beta testers. And just checking the reports I have submitted, six (6) times the HS betas have failed to install going back to Oct. 26th, one for each beta step. That is how many bug reports I have submitted on the exact same issue.
I fully understand what beta testing is and I expect bugs. As a matter of act I have submitted 33 bug reports. But I also expect apple to make an attempt to fix them. So to me, it looks like apple doesn't care. Never had this issue with the Sierra, El Capitan or Yosemite betas. And yes, all on the same machine configured the same for all four betas.
As to the terminal install, I am not that savvy and have never heard of your method. Don't bother to explain though. If I cool off and stay as a beta tester, I'll continue on in apples program. That way at least I'm doing it the "official" way.
Fair enough, but just for the record the terminal method is far from a hack or anything unofficial. It’s just a basic single command line entry.
Score: 1 Votes (Like | Disagree)