David Kimura PRO said about 3 years ago on StimulusJS, Active Storage and DropzoneJS :
Can't verify CSRF token authenticity.

This does seem to be the issue. What does the form and stimulus controller look like?