Yup unless encrypted and password locked. Never leave a machine unlocked.

There are/were some highly-sophisticated attacks using peripheral bus exploits (firewire, thunderbolt, etc.), but that's a very unlikely threat to most people.