cpp-ethereum versions 1.2.0 to 1.2.6 have a critical account unlocking security vulnerability that remains unfixed. Popular Ethereum clients like geth, Mist, and Ethereum Wallet are not affected by this issue and properly lock accounts.
A critical security vulnerability in cpp-ethereum versions 1.2.0 to 1.2.5 keeps user accounts unlocked, potentially allowing unauthorized access to funds. The issue has been fixed in version 1.2.6, while other Ethereum clients like geth and Mist are not affected.
A security advisory has been issued for eth (cpp-ethereum) users running with UPnP enabled, indicating a medium likelihood vulnerability. This affects a specific configuration of the Ethereum client software and poses potential security risks to affected nodes.
