A race condition vulnerability occurs when the timing of actions impacts a system’s state, allowing an attacker to perform malicious actions in the timeframe between when a security control checks an attribute (Time-of-check) and when that attribute is used (Time-of-use). If an attacker can manipulate the timing of operations, they can exploit this window to their advantage, bypassing checks that would normally prevent unauthorized actions.