As some might have read, then High Sierra has a pretty serious bug.
If I understand it correctly, then it is possible to gain root access without knowing any password 
See below link how to protect yourself until the fix is released.
even over a local network, it seems ...
Yeah. It is not good
Open the App Store app. There’s already a fix.
2 Likes