diff --git a/website/docs/debug/trex_debugging.md b/website/docs/debug/trex_debugging.md
index bd8ea1e1..73438ba6 100644
--- a/website/docs/debug/trex_debugging.md
+++ b/website/docs/debug/trex_debugging.md
@@ -113,6 +113,12 @@ The remote debugging port (for example, `8696`) must match the port address you
 
 :::
 
+:::important
+
+If using the `QTWEBENGINE_REMOTE_DEBUGGING` environment variable to enable remote debugging, **unset it when done**. Leaving this variable set allows unauthenticated remote access to your extension’s runtime, creating a remote code execution vulnerability.
+
+:::
+
 ---
 
 ## Debugging Tableau Desktop using Chrome/Chromium