diff --git a/src/quic/session.cc b/src/quic/session.cc
index a6204f8da1b434..87a4a8e54557f7 100644
--- a/src/quic/session.cc
+++ b/src/quic/session.cc
@@ -643,7 +643,7 @@ void Session::Destroy() {
   endpoint_->DisassociateCID(config_.dcid);
   endpoint_->DisassociateCID(config_.preferred_address_cid);
 
-  for (auto cid : cids) endpoint_->DisassociateCID(CID(&cid));
+  for (const auto& cid : cids) endpoint_->DisassociateCID(CID(&cid));
 
   for (const auto& token : tokens) {
     if (token.token_present)