A critical vm2 Node.js vulnerability (CVE-2026-22709, CVSS 9.8) allows sandbox escape via Promise handler bypass.
Dahl stated that while software engineers (SWEs) will continue to have important roles, the direct act of writing syntax line by line is no longer the core task.