The /debug/pprof/cmdline endpoint in Dgraph Alpha discloses the command-line arguments used to start the process, which may include the administrator's authentication token if provided via the --auth token flag. This allows an unauthenticated remote attacker to obtain the token and gain full administrative access to the Dgraph cluster.