Renpy Save Editor top -

Ren'Py Save Editor: A Tool for Authors and Players

Visual novel developers often use save editors during testing to jump to specific scenes, set variables quickly, or reproduce bugs. renpy save editor

Implement a sandboxed unpickler that forbids object construction beyond a safe whitelist.
Parse serialized data into a neutral representation (e.g., primitives, lists, dicts) without executing arbitrary reduce-style constructors.
Use dedicated parsers for Ren'Py’s own serialization format if available in the target version.

Python pickle and similar mechanisms can execute arbitrary code during unpickling, enabling remote code execution if the save originates from an untrusted source. Editors that unpickle without sandboxing can thus expose users to malware.
Recommendation: treat all saves as untrusted; avoid direct unpickling in an environment with access to sensitive system resources. Use a safe deserializer or run untrusted deserialization in a restricted sandbox (container, VM, process with limited permissions and no network).

Applications and Use Cases