In case you haven't heard the new there is a massive security flaw in macOS, which allows anybody to log into the root account with a blank password. The flaw was discovered by Lemi Orhan Ergin (@lemiorhan):
How it works.
https://objective-see.com/blog/blog_0x24.html