MySQL Server Information Schema Unauthorized Data Read

Small 4-file proof-of-concept repository demonstrating CVE-2026-22015, an environment variable injection issue in a Python serverless/Lambda-style handler. The core code is in lambda_env_inject.py, where handler(event, context) iterates over event.get('env', {}) and writes each key/value pair directly into os.environ, then returns os.environ.get('SECRET', 'not set'). The included exploit.json provides the malicious payload {"env":{"SECRET":"attacker_controlled"}}, showing that an attacker can overwrite a sensitive environment variable through the event object. README.md documents the issue, impact, and local demonstration steps. There are no external network callbacks, URLs, IPs, or C2 endpoints in the code; the exploit is purely local/cloud event-driven data injection against a misconfigured serverless function. Primary capability is manipulation of runtime environment variables, which can lead to secret override, credential theft, or application logic corruption if the function relies on env vars for trust or configuration.