intermodulation is sadly toned down, only LFO2 can talk to LFO1 (and an env can + others) and a destination does not include shape unfortunately - given that CV source track can be modulated as a source for CV info then this seems somewhat of a conservative limitation - you’ll have to change your waveshape externally using cc/nrpn - now if only there was a little external gugadget to do that ! 
