A security reviewer examines an application that checks whether a user has permission to access a temporary file, and then—moments later—opens that file to read its contents. An attacker discovers that by swapping the file with a symbolic link during the brief window between these two operations, they can trick the application into reading a protected system file. Which vulnerability does this describe?