diff --git a/docs/topics/jobs.rst b/docs/topics/jobs.rst
index 2a976e91d..769925dd5 100644
--- a/docs/topics/jobs.rst
+++ b/docs/topics/jobs.rst
@@ -31,6 +31,10 @@ job (i.e. a spider run), so that if stopped cleanly, it can be resumed later.
 .. warning:: This directory must *not* be shared by different spiders, or even
     different jobs of the same spider.
 
+.. warning:: Treat the job directory with the same security care as your
+    Scrapy project source code. Do not point ``JOBDIR`` to a path that
+    untrusted parties can write to.
+
 See also :ref:`job-dir-contents`.
 
 How to use it