Root is the highest-privilege account on Unix-like systems, including Linux. It can read or change nearly any file, start or stop services, modify users, load drivers, and alter security settings. Because root sits above normal permission checks, it effectively controls the entire host.
In cyber security, root matters because many attacks aim to turn a small foothold into full system control. A local privilege-escalation flaw, a stolen administrator credential, or a misconfigured service can let an attacker execute commands as root and bypass ordinary defenses. Once that happens, logs can be erased, persistence can be installed, and sensitive data can be accessed. Defenders protect root by patching privilege-escalation bugs quickly, limiting who can use sudo or direct root logins, and monitoring for unexpected root-level processes or changes.