What is TOCTOU?

TOCTOU (Time-of-Check Time-of-Use) is a race condition vulnerability where an attacker exploits the brief gap between a system's check of a resource's state and its actual use, altering the condition in between to bypass security controls.