root security weakness (1)