# Agent Platform Research Briefing — 2026-03-06
## Summary
Four genuinely new stories today: GPT-5.4 is OpenAI's biggest model release in months, ClawJacked is a newly-disclosed full-agent-takeover vulnerability in core OpenClaw, dedicated OpenClaw hardware arrives from a public company, and OpenAI quietly improved multilingual voice reliability.
---
## 1. OpenAI Launches GPT-5.4 — 1M Context, Computer Use, Tool Search
**Source:** TechCrunch, VentureBeat, The Verge, Ars Technica, Gizmodo — March 5, 2026
OpenAI released GPT-5.4 on Thursday, calling it "the most capable and efficient frontier model for professional work." Key developments:
- **1 million token context window** — the first time OpenAI has matched this capability, which Anthropic has offered since early 2026
- **Native computer use** — record scores on OSWorld-Verified and WebArena-Verified benchmarks
- **GPT-5.4 Thinking** — a reasoning variant, plus a high-performance GPT-5.4 Pro tier
- **Tool Search API** — instead of loading all tool definitions into the system prompt (expensive at scale), models now look up tool definitions on demand; major token efficiency improvement for multi-agent systems
- **33% fewer hallucinations** vs GPT-5.2 in individual claims; 18% fewer errors in overall responses
- **Financial plugins** for Microsoft Excel and Google Sheets
- **GDPval benchmark**: 83% on OpenAI's own knowledge-work test
VentureBeat notes this is the second new underlying model in three days (GPT-5.3 Instant launched March 3). Ars Technica reports Anthropic saw its largest single day for new sign-ups on March 2, making this clearly a competitive response.
**Relevance:** Tool Search is directly relevant to OpenClaw skill loading and multi-MCP agent architectures. The 1M context window closes a key gap vs Claude Opus 4.6.
---
## 2. ClawJacked — Oasis Security Discloses Full OpenClaw Agent Takeover
**Sources:** Oasis Security blog (March 3), TechRadar (March 3), RedPacket Security CVE alerts (March 5, 2026)
Oasis Security publicly disclosed "ClawJacked," a vulnerability chain in OpenClaw's core that allows **any website to silently take full control of a developer's AI agent** — no plugins, no extensions, no user interaction beyond visiting the page.
The attack exploits OpenClaw's loopback WebSocket endpoint. Researchers found that a malicious page could interact with the WebSocket listener without authentication, gaining full control of the agent's messaging, command execution, and workflow capabilities.
- **Severity:** High
- **Patch:** OpenClaw 2026.2.25+ (shipped within 24 hours of disclosure)
- **CVE IDs published March 5:** CVE-2026-28458 (WebSocket loopback), CVE-2026-28462 (browser control path traversal, pre-2026.2.13), CVE-2026-28465 (voice-call webhook bypass, CVSS 7.5, pre-2026.2.3)
OpenClaw had already patched the core WebSocket flaw in 2026.2.25, but the public disclosure and formal CVE assignments arrived this week, along with two additional plugin-level CVEs.
**Note for GLaDOS:** GLaDOS is running 2026.2.26+ (confirmed current). The core ClawJacked flaw is patched. CVE-2026-28465 (voice-call webhook) affects pre-2026.2.3 installs — check whether the voice-call plugin is installed.
---
## 3. Nano Labs Launches iPollo ClawPC A1 Mini — Dedicated OpenClaw Hardware
**Source:** Globe Newswire / Manila Times — March 6, 2026
Nano Labs Ltd (Nasdaq: NA), a Hong Kong-listed Web3 infrastructure company, announced the **iPollo ClawPC A1 Mini** — the first purpose-built hardware designed specifically for running the OpenClaw AI agent ecosystem.
The device targets gaming, professional content creation, and smart office environments, promising "efficient, fluent, and localized AI-powered intelligent experience." It runs local models natively.
Roadmap includes:
- **iPollo Claw OS** — a dedicated operating system for OpenClaw
- **iPollo Skill Hub** — curated marketplace (separate from ClawHub, which had the malicious skills problem)
- Additional OpenClaw-compatible hardware through the iPollo Store
CEO Jianping Kong: "We aim to elevate AI from a supportive tool to an independent and collaborative digital entity."
**Relevance:** First Nasdaq-listed company to build hardware specifically for OpenClaw. Signals the ecosystem is maturing past DIY Mac mini setups. The Mac mini is reportedly getting hard to come by due to OpenClaw demand (Hackster.io, March 5).
---
## 4. OpenAI Updates Realtime Model for Multilingual Voice Agent Reliability
**Source:** Slator — March 6, 2026
OpenAI quietly pushed an update to its `gpt-realtime` voice model improving reliability for multilingual voice agents, specifically in customer support deployments. No version number disclosed.
This follows the broader Realtime API expansion announced in February (MCP support, SIP calling, image input). The multilingual reliability update is aimed at enterprise voice deployments where language switching mid-conversation caused reliability issues.
**Relevance:** Directly relevant to voice AI builders. The enterprise push for multilingual realtime voice continues.
---
## Topics Monitored — No New Developments
- **DeepSeek V4**: Still not officially released as of 6 AM PT March 6. Multiple sources predicted "this week" as of March 2. Withholding until confirmed release. (stories-covered: deepseek-v4-today, deepseek-v4-imminent-march)
- **Starship Flight 12**: No static fire date set. Ship 39 cryo complete. (stories-covered: starship-ship39-cryo-complete)
- **Firefly Alpha**: Still no new launch window set. (stories-covered: firefly-alpha-third-scrub)
- **OpenClaw 2026.3.2**: Covered yesterday. No new release. (stories-covered: openclaw-2026-3-2)
- **NVIDIA GTC 2026**: March 16 keynote. Nothing new yet. (stories-covered: nvidia-gtc-2026)