A newly discovered security issue in Devuan’s default installation allows for obtaining root privileges without a password.

Source: LXer – Devuan Users Are at Risk, Take Action to Protect Your System