CVE-2025-27231
The LDAP ‘Bind password’ value cannot be read after saving, but a Super Admin account can leak it by changing LDAP ‘Host’ to a rogue LDAP server. To mitigate this, the ‘Bind password’ value is now reset on ‘Host’ change.
More information : https://support.zabbix.com/browse/ZBX-27062