On Tuesday 28th November, 2017,  identified a "HUGE" security issue with MacOS High Sierra.

Stating that "Anyone can login as "root" with empty password after clicking on login button several times."

Apple are working on an update and have advised following the instructions here to prevent unauthorized access.