In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly.Referenceshttps://godotengine.org/newshttps://github.com/godotengine/godot/pull/27398
