diff --git a/website/docs/debug/trex_debugging.md b/website/docs/debug/trex_debugging.md
index 5da05c58..bd8ea1e1 100644
--- a/website/docs/debug/trex_debugging.md
+++ b/website/docs/debug/trex_debugging.md
@@ -74,6 +74,12 @@ The remote debugging port (for example, `8696`) must match the port address you
 
 :::
 
+:::important
+
+If using the `QTWEBENGINE_REMOTE_DEBUGGING` environment variable to enable remote debugging, **unset it when done**. Leaving this variable set allows unauthenticated remote access to your extension’s runtime, creating a remote code execution vulnerability.
+
+:::
+
 ---
 
 #### Optional - Create a Tableau shortcut for debugging (Windows)