OpenClaw has released v2026.3.2, which includes a new native PDF analysis tool, along with 150+ fixes and several breaking changes.

According to 1M AI News, on March 3, the open-source AI Agent framework OpenClaw released version v2026.3.2, including multiple new features, security enhancements, and over 150 bug fixes, with contributions from 93 contributors. Key new features in this version include a new native PDF analysis tool, support for Anthropic and Google as PDF processing backends, configurable extraction fallback policies, and page/size limits; the SecretRef credential reference mechanism extended to 64 targets, covering the entire runtime collector, planning/execution/audit workflow, and unresolved references will now immediately error out on active interfaces; addition of the STT (Speech-to-Text) API, supporting transcription of audio files through configured service providers; default switching of Telegram message streaming to "partial" mode for real-time previews; addition of the MiniMax-M2.5-highspeed model to the provider directory.

This version includes four breaking changes: default tooling configuration for new installations has switched from a comprehensive programming toolset to the "messaging" configuration; ACP scheduling is now enabled by default; the Plugin HTTP route registration API has changed from registerHttpHandler to requiring explicit declaration of authenticated registerHttpRoute; Zalo Personal no longer relies on external CLI binaries but uses a pure JS runtime instead. Security-wise, fixes were made for Gateway loopback WebSocket hardening, plugin route registration deduplication prevention, Webhook authentication pre-parsing, and skill workspace symlink escape protection.