Here's How to Temporarily Fix the macOS High Sierra Bug That Gives Full Admin Access to Your Mac Sans Password [Updated]

Wednesday November 29, 2017 7:34 AM PST by Juli Clover
A newly discovered bug in macOS High Sierra enables the root superuser on a Mac with a blank password and no security check, essentially giving anyone full access to your Mac.

Apple is likely already working on a fix, but in the meantime, there's a temporary workaround -- enabling the root user with a password. Here's how:

  1. Open Spotlight and search for Directory Utility.

  2. Double click on the app result to open.

  3. Click on the lock at the bottom of the window to make changes and enter your username and password for an administrator account on your computer.

  4. In the menu bar at the top of the screen, choose "Edit."

  5. Select "Enable Root User."


From there, you can enter a password for the root user account, which prevents it from being accessed with a blank password, which is what the current bug allows to happen.


Disabling the root user account again follows the same steps, but at the "Edit" portion of the process, you'll select "Disable Root User" to remove the option. Until the bug is fixed, though, you'll want to leave the root user account intact to prevent it from being accessed without a password.

To further protect your Mac, you can also disable guest accounts, though this is not a necessary step with a root password enabled. Guest accounts can be disabled by going to System Preferences > Users & Groups and choosing "Guest User" after entering your admin password. Disable "Allow guests to log in to this computer."

Update: Apple has released a security update to fix this issue, and all macOS High Sierra users should apply the update as soon as possible to ensure they are protected.

82 comments


Top Rated Comments

(View all)
Avatar
poppy10
18 months ago
This is such a fundamental and major security flaw, it's mind-blowing how it managed to get through Apple's QA

A critical vulnerability that allows root access to all macs with a single click. We'd be laughing at Microsoft if this had occurred with Windows
Rating: 27 Votes
Avatar
rpmurray
18 months ago
Now the new backdoor that Apple added for the government has been blown.
Rating: 12 Votes
Avatar
Sefstah
18 months ago

Or, you know, don't leave your laptop sitting around unlocked. As more or less 100% of your critical info is under your user account anyway, probably even in the easy to find Documents folder, it's almost useless to spend time (as a theif) monkeying with root accounts. Just yoink what you need directly. Creating a root password (as a theif) presumes future access to the Mac, in which case it's been lifted already, and there are ways to get at your info, anyway, if it's unencrypted, as most Macs are.

Pretty dumb flaw, yes, but you deserve what you get if you leave your unattended, unlocked laptop lying around where people can physically get at it in the first place.

Laptop? How about all the schools and Universities that use iMacs with admin accounts? This is a HUGE flaw and shouldn’t be downplayed.
Rating: 9 Votes
Avatar
KvR
18 months ago
Much easier (if your comfortable with the terminal) fix:

sudo passwd root

Just set a password on your root account.
Rating: 8 Votes
Avatar
simonmet
18 months ago
This is an extraordinary level of incompetence. Normally I’d say security bypasses like this are by design but this is such an easy and obvious bypass that it was bound to be discovered fairly quickly.

What does this say about the state of software development at Apple? I get that mistakes and bugs happen but something this severe and easy to replicate can’t have occurred without multiple people not doing their jobs properly.

Does Apple have QA anymore?
Rating: 5 Votes
Avatar
miniyou64
18 months ago
Unbelievable. This is not Steve’s Apple.
Rating: 5 Votes
Avatar
Doctor Q
18 months ago
A faster way to launch Directory Utility is to type "directory utility" in Spotlight, then press return. (This assumes that you have "Applications" enabled in Spotlight's preferences.)

Make sure you choose a secure root password. Leaving root enabled with an easily guessed password defeats the purpose.
Rating: 5 Votes
Avatar
riverfreak
18 months ago
Wow. Just, wow.
Rating: 4 Votes
Avatar
pallymore
18 months ago

Or, you know, don't leave your laptop sitting around unlocked. As more or less 100% of your critical info is under your user account anyway, probably even in the easy to find Documents folder, it's almost useless to spend time (as a theif) monkeying with root accounts. Just yoink what you need directly. Creating a root password (as a theif) presumes future access to the Mac, in which case it's been lifted already, and there are ways to get at your info, anyway, if it's unencrypted, as most Macs are.

Pretty dumb flaw, yes, but you deserve what you get if you leave your unattended, unlocked laptop lying around where people can physically get at it in the first place.


Yes, it is always the users’ fault.

I’m pretty sure software/hardware companies only need to test their products the correct way they are supposed to be used.
Rating: 3 Votes
Avatar
MrRobot2
18 months ago
I was just able to access my wifes' computer and found evidence she is cheating on me. I will sue for custody of my children. I am packing my things. Thanks Apple.
Rating: 3 Votes
[ Read All Comments ]