diff --git a/CHANGES/+ignore_netrc.bugfix b/CHANGES/+ignore_netrc.bugfix
new file mode 100644
index 000000000..90274ef72
--- /dev/null
+++ b/CHANGES/+ignore_netrc.bugfix
@@ -0,0 +1 @@
+Prevent picking up ~/.netrc logins.
diff --git a/pulp-glue/src/pulp_glue/common/openapi.py b/pulp-glue/src/pulp_glue/common/openapi.py
index 137dfdc80..d562f353d 100644
--- a/pulp-glue/src/pulp_glue/common/openapi.py
+++ b/pulp-glue/src/pulp_glue/common/openapi.py
@@ -15,6 +15,7 @@
 import requests
 import urllib3
 from multidict import CIMultiDict, CIMultiDictProxy, MutableMultiMapping
+from requests.auth import AuthBase
 
 from pulp_glue.common import __version__
 from pulp_glue.common.authentication import AuthProviderBase
@@ -58,6 +59,11 @@ class _Response:
     body: bytes
 
 
+class _RequestsFakeAuth(AuthBase):
+    def __call__(self, request: requests.PreparedRequest) -> requests.PreparedRequest:
+        return request
+
+
 class OpenAPI:
     """
     The abstraction Layer to interact with a server providing an openapi v3 specification.
@@ -160,6 +166,7 @@ def _setup_session(self) -> None:
         )
         self._session.verify = session_settings["verify"]
         self._session.proxies = session_settings["proxies"]
+        self._session.auth = _RequestsFakeAuth()
 
         if self._auth_provider is not None and self._auth_provider.can_complete_mutualTLS():
             cert, key = self._auth_provider.tls_credentials()