diff --git a/user_guide_src/source/models/entities.rst b/user_guide_src/source/models/entities.rst
index 56c17114138e..52fb020612d5 100644
--- a/user_guide_src/source/models/entities.rst
+++ b/user_guide_src/source/models/entities.rst
@@ -287,6 +287,10 @@ the value whenever the property is set:
 
 .. literalinclude:: entities/014.php
 
+.. warning:: The ``array`` cast uses PHP serialization. Only read values previously
+    written through the same Entity cast. Never store untrusted serialized strings
+    directly in an ``array``-cast field.
+
 CSV Casting
 -----------