diff --git a/apps/macos/Sources/OpenClaw/HostEnvSecurityPolicy.generated.swift b/apps/macos/Sources/OpenClaw/HostEnvSecurityPolicy.generated.swift
index 4ef385d708c4..f712085c2c55 100644
--- a/apps/macos/Sources/OpenClaw/HostEnvSecurityPolicy.generated.swift
+++ b/apps/macos/Sources/OpenClaw/HostEnvSecurityPolicy.generated.swift
@@ -62,6 +62,7 @@ enum HostEnvSecurityPolicy {
         "CPP",
         "CURL_HOME",
         "CXX",
+        "CXXCPP",
         "C_INCLUDE_PATH",
         "DATABASE_URL",
         "DENO_DIR",
@@ -244,6 +245,7 @@ enum HostEnvSecurityPolicy {
         "CORECLR_PROFILER",
         "CPP",
         "CXX",
+        "CXXCPP",
         "DOTNET_ADDITIONAL_DEPS",
         "DOTNET_STARTUP_HOOKS",
         "ELIXIR_ERL_OPTIONS",
diff --git a/src/infra/host-env-security-policy.json b/src/infra/host-env-security-policy.json
index 094a47ab6333..5d481c745f44 100644
--- a/src/infra/host-env-security-policy.json
+++ b/src/infra/host-env-security-policy.json
@@ -37,6 +37,7 @@
     "CC",
     "CPP",
     "CXX",
+    "CXXCPP",
     "CARGO_BUILD_RUSTC",
     "CARGO_BUILD_RUSTC_WRAPPER",
     "CARGO_BUILD_RUSTC_WORKSPACE_WRAPPER",
diff --git a/src/infra/host-env-security.reported-baseline.json b/src/infra/host-env-security.reported-baseline.json
index f92d7a43f603..b29894b0e3c2 100644
--- a/src/infra/host-env-security.reported-baseline.json
+++ b/src/infra/host-env-security.reported-baseline.json
@@ -23,6 +23,7 @@
     "CORECLR_PROFILER",
     "CPP",
     "CXX",
+    "CXXCPP",
     "DOTNET_ADDITIONAL_DEPS",
     "DOTNET_STARTUP_HOOKS",
     "ELIXIR_ERL_OPTIONS",
@@ -270,5 +271,5 @@
     "YARN_RC_FILENAME",
     "ZDOTDIR"
   ],
-  "expectedTotalReportedEntries": 265
+  "expectedTotalReportedEntries": 266
 }
diff --git a/src/infra/host-env-security.reported-baseline.test.ts b/src/infra/host-env-security.reported-baseline.test.ts
index c66fe0f75111..6a29dc8902a1 100644
--- a/src/infra/host-env-security.reported-baseline.test.ts
+++ b/src/infra/host-env-security.reported-baseline.test.ts
@@ -98,7 +98,7 @@ describe("host env reported baseline coverage", () => {
       baseline.reportedDangerousEverywhereKeys.length +
         baseline.reportedDangerousOverrideOnlyKeys.length,
     ).toBe(baseline.expectedTotalReportedEntries);
-    expect(baseline.expectedTotalReportedEntries).toBe(265);
+    expect(baseline.expectedTotalReportedEntries).toBe(266);
     expect(sortUniqueUpper(baseline.reportedDangerousEverywhereKeys)).toEqual(
       baseline.reportedDangerousEverywhereKeys,
     );
diff --git a/src/infra/host-env-security.test.ts b/src/infra/host-env-security.test.ts
index 5c5cc96287e8..b67a9d89efa3 100644
--- a/src/infra/host-env-security.test.ts
+++ b/src/infra/host-env-security.test.ts
@@ -182,6 +182,7 @@ describe("isDangerousHostEnvVarName", () => {
     expect(isDangerousHostEnvVarName("CC")).toBe(true);
     expect(isDangerousHostEnvVarName("cpp")).toBe(true);
     expect(isDangerousHostEnvVarName("cxx")).toBe(true);
+    expect(isDangerousHostEnvVarName("cxxcpp")).toBe(true);
     expect(isDangerousHostEnvVarName("CARGO_BUILD_RUSTC")).toBe(true);
     expect(isDangerousHostEnvVarName("cargo_build_rustc")).toBe(true);
     expect(isDangerousHostEnvVarName("CARGO_BUILD_RUSTC_WRAPPER")).toBe(true);