PT-2026-135499

When a CA's parent lives on the same Krill server: instead of building and verifying a signed CMS message, it runs the RFC 6492 provisioning exchange in-process and trusts the child identity child handle that the caller put in the parent contact. Nothing checks that this child identity actually...