TOCTOU
TOCTOU (Time-Of-Check to Time-Of-Use) is a classic race-condition vulnerability in computer security. It refers to a time gap between the moment a permission check is performed and the moment the resource is actually used, allowing the check result to become invalid before execution and enabling attackers to bypass security controls.
Timeline (last 90 days)
In LLM Agent scenarios, TOCTOU manifests as: the permission check happens inside the tool handler (the point of use), while the decision driving that use was already made when the context was contaminated.
A TOCTOU (Time-of-Check to Time-of-Use) vulnerability means that as long as the object being verified and the object acted upon are fetched separately, whoever controls the second object determines what actually happens.
Static analysis cannot detect TOCTOU attacks on agent skills because the content being analyzed is not the content being executed, and the substitution can occur between the scan and the next invocation.
TOCTOU vulnerabilities were first systematically studied in the 1970s, originally describing race conditions in operating system file permission checks (such as symlink swapping between access() and open()).
A TOCTOU (time-of-check to time-of-use) race condition refers to a situation where the check occurs at one moment and the use occurs at another, with state changes between the two being unconstrained.
A symlink attack exploits the time window between when a program opens a file and when it actually reads the file to replace the target path, a security vulnerability known as a TOCTOU (Time-of-Check to Time-of-Use) race condition.
Common fixes for TOCTOU vulnerabilities include using atomic file operations, normalizing path validation (such as realpath resolution), or switching from path strings to file descriptors.
Symlink race conditions are a classic variant of TOCTOU (Time-of-Check to Time-of-Use) vulnerabilities.
Validating at the point of execution rather than the point of entry shortens the time window between check and use, mitigating TOCTOU issues.
The update fixes a TOCTOU race condition vulnerability in file tools (Read, Write, Edit) where, after permission checks passed, replacing a symbolic link within the working directory could result in reading or writing files outside the authorized scope
All Facts (10)
In LLM Agent scenarios, TOCTOU manifests as: the permission check happens inside the tool handler (the point of use), while the decision driving that use was already made when the context was contaminated.
50%UnverifiedA TOCTOU (Time-of-Check to Time-of-Use) vulnerability means that as long as the object being verified and the object acted upon are fetched separately, whoever controls the second object determines what actually happens.
50%UnverifiedStatic analysis cannot detect TOCTOU attacks on agent skills because the content being analyzed is not the content being executed, and the substitution can occur between the scan and the next invocation.
50%UnverifiedTOCTOU vulnerabilities were first systematically studied in the 1970s, originally describing race conditions in operating system file permission checks (such as symlink swapping between access() and open()).
50%UnverifiedA TOCTOU (time-of-check to time-of-use) race condition refers to a situation where the check occurs at one moment and the use occurs at another, with state changes between the two being unconstrained.
50%UnverifiedA symlink attack exploits the time window between when a program opens a file and when it actually reads the file to replace the target path, a security vulnerability known as a TOCTOU (Time-of-Check to Time-of-Use) race condition.
50%UnverifiedCommon fixes for TOCTOU vulnerabilities include using atomic file operations, normalizing path validation (such as realpath resolution), or switching from path strings to file descriptors.
50%UnverifiedSymlink race conditions are a classic variant of TOCTOU (Time-of-Check to Time-of-Use) vulnerabilities.
50%UnverifiedValidating at the point of execution rather than the point of entry shortens the time window between check and use, mitigating TOCTOU issues.
50%UnverifiedThe update fixes a TOCTOU race condition vulnerability in file tools (Read, Write, Edit) where, after permission checks passed, replacing a symbolic link within the working directory could result in reading or writing files outside the authorized scope
50%