diff --git a/components/engine/hack/install.sh b/components/engine/hack/install.sh
index 1b2c819860..9f482234df 100644
--- a/components/engine/hack/install.sh
+++ b/components/engine/hack/install.sh
@@ -137,6 +137,12 @@ echo_docker_as_nonroot() {
 
 	Remember that you will have to log out and back in for this to take effect!
 
+	WARNING: Adding a user to the "docker" group will grant the ability to run
+	         containers which can be used to obtain root privileges on the
+	         docker host.
+	         Refer to https://docs.docker.com/engine/security/security/#docker-daemon-attack-surface
+	         for more information.
+
 	EOF
 }