--- description: Apple has released a fix for a Mac bug that made it possible to adjust settings without typing in an administrator username and password. title: You Should Download Apple's New Mac Security Update Immediately image: https://static.time.com/v3/assets/bltea6093859af6183b/blt5c95103ed3cb203b/6988abeecd1bbad520702dfc/macbooks.jpg?branch=production&width=3840&quality=75&auto=webp&crop=16:9 ---  * [Business](/section/business/) ## Business Update your preferences in [Account Settings](/account/preferences/) Close * [Tech](/tag/time-section-tech/) ## Tech Update your preferences in [Account Settings](/account/preferences/) Close # You Should Download Apple's New Mac Security Update Immediately  by [Lisa Eadicicco](/author/lisa-eadicicco/)  ## Lisa Eadicicco Update your preferences in [Account Settings](/account/preferences/) Close Nov 29, 2017 5:44 PM CUT  MacBook Pro MacBook ProLisa Eadicicco  by [Lisa Eadicicco](/author/lisa-eadicicco/)  ## Lisa Eadicicco Update your preferences in [Account Settings](/account/preferences/) Close Nov 29, 2017 5:44 PM CUT Apple [is offering a fix](https://support.apple.com/en-us/HT208315 "undefined") for a recently discovered security flaw in its new Mac operating system that made it possible for an intruder to bypass administrator authentication without typing in a password. By exploiting this bug, one would be able to change a Mac’s settings without knowing the owner’s password. Apple’s latest update for macOS High Sierra, the new Mac software it launched in September, addresses this flaw. Apple said in a statement that it’s auditing its development process to prevent a similar situation from happening again. The update is available to download and will be automatically installed on all systems running version macOS High Sierra 10.13.1 later on Wednesday. Below is Apple’s full comment: --- > “” --- To see if a software update is available for your Mac, click the Apple icon, select About Mac, and click the button that says “software update.” You can also open the App Store on your Mac and click the Updates tab to check for new software. Developer Lemi Orhan Ergin publicly informed Apple about the security issue [via Twitter](https://twitter.com/lemiorhan/status/935578694541770752 "undefined") on Nov. 28, and was criticized by some for doing so out of fear that the bug would be more widely exploited. Ergin wrote [in a blog post](https://twitter.com/lemiorhan/status/935578694541770752 "undefined") that his colleagues informed Apple of the issue on Nov. 23. According to Ergin, the exploit worked when opening the System Preferences menu, selecting Users & Groups, and then clicking the lock to make changes. When the prompt appears on screen asking for administrator login credentials, Ergin said it was possible to gain access when typing “root” in the username field while leaving the password blank after pressing the unlock button multiple times. Several Twitter users replied to Ergin’s tweet saying the technique worked. Before the software fix was released, users could have made it so that [a password must be typed in](https://www.macrumors.com/how-to/temporarily-fix-macos-high-sierra-root-bug/ "undefined") before gaining root access to their Mac. ```json [{"@context":"https://schema.org","@type":"NewsArticle","@id":"https://time.com/5041092/mac-root-bug-software-update/","mainEntityOfPage":{"@type":"WebPage","@id":"https://time.com/5041092/mac-root-bug-software-update/"},"headline":"You Should Download Apple's New Mac Security Update Immediately","datePublished":"2017-11-29T17:44:59.000Z","dateModified":"2026-04-13T08:51:32.906Z","description":"It fixes a problem that let people access your computer without a password","url":"https://time.com/5041092/mac-root-bug-software-update/","keywords":["Tech","Apple","mac","Security","cybersecurity","onetime"],"thumbnailUrl":"https://static.time.com/v3/assets/bltea6093859af6183b/blt5c95103ed3cb203b/6988abeecd1bbad520702dfc/macbooks.jpg?branch=production&width=1200&quality=75&auto=webp&crop=1200:675&height=675","author":[{"@type":"Person","name":"Lisa Eadicicco","jobTitle":null,"url":"https://time.com/author/lisa-eadicicco/"}],"articleSection":"Business","image":[{"@type":"ImageObject","url":"https://static.time.com/v3/assets/bltea6093859af6183b/blt5c95103ed3cb203b/6988abeecd1bbad520702dfc/macbooks.jpg?branch=production&width=1200&quality=75&auto=webp&crop=1200:675&height=675","width":1200,"height":675,"headline":"MacBook Pro","caption":"MacBook Pro","creditText":"Lisa Eadicicco","representativeOfPage":true}],"publisher":{"@type":"Organization","name":"Time","url":"https://time.com/","logo":{"@type":"ImageObject","url":"https://time.com/images/logo.png","width":528,"height":156},"foundingDate":"March 3, 1923","sameAs":["https://www.facebook.com/time","https://www.instagram.com/time/?hl=en","https://twitter.com/time","https://www.pinterest.com/timemagazine"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"item":{"@id":"/section/business/","name":"Business"}},{"@type":"ListItem","position":2,"item":{"@id":"/tag/time-section-tech/","name":"Tech"}},{"@type":"ListItem","position":3,"item":{"@id":"https://time.com/5041092/mac-root-bug-software-update/","name":"You Should Download Apple's New Mac Security Update Immediately"}}]}] ```