A local root exploit means that the attacker has to be logged in to the box to exploit the bug. Logged in, but not necessarily sitting in front of the machine ...