The memsql exporter user/password can be seen easily as they are part of the command line. This should be changed to be better hidden.
A simple ps -ef can show the credentials:
memsql_exporter --config.user= --config.pass= --config.host=localhost --config.port=10000 --web.listen-address=:12001