You can only do that if you already have shell access (in which case the vulnerability gives you nothing). The remote exploit works because untrusted users can

You can only do that if you already have shell access (in which case the vulnerability gives you nothing). The remote exploit works because untrusted users can put code into an environment variable, but the target needs to create a new bash to execute the code.