OpenClaw releases v2026.3.2, adding a native PDF analysis tool, including 150+ fixes and several disruptive changes.

According to Mars Finance, on March 3rd, the open-source AI Agent framework OpenClaw released version v2026.3.2, which includes several new features, security enhancements, and over 150 bug fixes, with contributions from 93 contributors. Key new features include: a new native PDF analysis tool supporting Anthropic and Google as PDF processing backends, with configurable extraction rollback strategies and page/size limits; the SecretRef credential referencing mechanism expanded to 64 targets, covering the entire process from runtime collectors to planning/execution/auditing, with unresolved references immediately reporting errors on active interfaces; a new STT (Speech-to-Text) API, supporting transcription of audio files via configured service providers; Telegram messaging streaming switched to "partial" mode by default to support real-time preview; and the MiniMax-M2.5-highspeed model added to the provider directory. This release includes four disruptive changes: the default tool configuration for new installations has been switched from a broad programming toolset to a "messaging" configuration; ACP scheduling is enabled by default; the plugin HTTP route registration API has been changed from registerHttpHandler to registerHttpRoute, which requires explicit authentication declaration; Zalo Personal no longer relies on external CLI binaries and instead uses a pure JS runtime. Security improvements include gateway loop WebSocket hardening, plugin route registration anti-duplicate measures, Webhook authentication pre-parsing, and protection against symbolic link escape in the skill workspace.