Zabbix Server and Proxy reuse JavaScript (Duktape) contexts for performance, which can cause data leakage between users. Specifically, non-super administrators may access confidential data from hosts they are not authorized to view. A fix has been released that makes built-in JavaScript objects read-only, but global JavaScript variables remain risky and their use is discouraged.