diff --git a/management/server/sqlite_store.go b/management/server/sqlite_store.go
index ed473e143..bbb13f8c6 100644
--- a/management/server/sqlite_store.go
+++ b/management/server/sqlite_store.go
@@ -298,7 +298,7 @@ func (s *SqliteStore) GetUserByTokenID(tokenID string) (*User, error) {
 
 	user.PATs = make(map[string]*PersonalAccessToken, len(user.PATsG))
 	for _, pat := range user.PATsG {
-		user.PATs[pat.ID] = &pat
+		user.PATs[pat.ID] = pat.Copy()
 	}
 
 	return &user, nil