diff --git a/builtin/credential/ldap/path_config.go b/builtin/credential/ldap/path_config.go
index f1b455a0e..bc4d800c1 100644
--- a/builtin/credential/ldap/path_config.go
+++ b/builtin/credential/ldap/path_config.go
@@ -158,9 +158,11 @@ func (b *backend) pathConfigRead(
 		return nil, nil
 	}
 
-	return &logical.Response{
+	resp := &logical.Response{
 		Data: structs.New(cfg).Map(),
-	}, nil
+	}
+	resp.AddWarning("Read access to this endpoint should be controlled via ACLs as it will return the configuration information as-is, including any passwords.")
+	return resp, nil
 }
 
 /*