diff --git a/content/collections/docs/graphql.md b/content/collections/docs/graphql.md
index e0daab877..b5e309850 100644
--- a/content/collections/docs/graphql.md
+++ b/content/collections/docs/graphql.md
@@ -1521,6 +1521,10 @@ EntriesQuery::auth(function () {
 });
 ```
 
+:::warning
+Make sure to [disable caching](#disabling-caching) when using authorization. Otherwise the cached authorized response will be served even to unauthorized clients!
+:::
+
 ## Custom fields
 
 You can add fields to certain types by using the `addField` method on the facade.