$ export a="/bin/cat flag.txt"
$ export b="$a"
$ ./access "$(echo \$b)"

Original writeup (https://github.com/soolidsnake/Write-ups/tree/master/WPICTF/Shell-JAIL-2).