diff --git a/.changelog/18112.txt b/.changelog/18112.txt
new file mode 100644
index 0000000000000..ddd37786f5520
--- /dev/null
+++ b/.changelog/18112.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ca: Fixes a Vault CA provider bug where updating RootPKIPath but not IntermediatePKIPath would not renew leaf signing certificates
+```