Not sure about the vulnerability of it, but it sounds like an unhandled race-condition.