diff --git a/hscontrol/db/db.go b/hscontrol/db/db.go
index cfc3b789..6e5f73d5 100644
--- a/hscontrol/db/db.go
+++ b/hscontrol/db/db.go
@@ -677,7 +677,7 @@ AND auth_key_id NOT IN (
 							continue
 						}
 
-						mergedTags := append(existingTags, validatedTags...)
+						mergedTags := append(slices.Clone(existingTags), validatedTags...)
 						slices.Sort(mergedTags)
 						mergedTags = slices.Compact(mergedTags)